Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa
File: 3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (raw, json)
Hash identifier: fgXPSQsqaItwV85kVDw1BpY1q2P/h3jwxlkF9YcsUtA=
Subject key identifier: 90:80:17:77:54:CC:80:E2:01:27:46:7B:59:F9:9B:8E:9B:50:84:13
Certificate issuer: /CN=B5A68ADE81322F194320BE4302C6897D29D13BDD
Certificate serial: 41331294F666FCA82E7859E55EFB2CB75200369F
Authority key identifier: B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa
Signing time: Tue 13 Aug 2024 03:54:33 +0000
ROA not before: Tue 13 Aug 2024 03:49:33 +0000
ROA not after: Tue 12 Aug 2025 03:54:33 +0000
asID: 152009
IP address blocks: 103.38.106.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:33:12:94:f6:66:fc:a8:2e:78:59:e5:5e:fb:2c:b7:52:00:36:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5A68ADE81322F194320BE4302C6897D29D13BDD
Validity
Not Before: Aug 13 03:49:33 2024 GMT
Not After : Aug 12 03:54:33 2025 GMT
Subject: CN=9080177754CC80E20127467B59F99B8E9B508413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:8d:d6:b6:33:30:f8:0a:67:6e:4b:e0:ee:
a6:bf:af:57:92:bf:b0:05:fb:d4:8b:f1:e1:3a:61:
cd:73:74:0f:a2:51:31:99:59:42:e4:4f:ca:31:5f:
8a:45:30:48:f1:b4:c2:12:3d:98:06:ad:7e:a2:59:
04:16:c9:94:9c:56:fa:89:3a:95:05:6f:46:dd:30:
e0:1d:df:86:6c:b5:e1:98:35:5a:2f:22:05:ce:e5:
5d:d5:0d:09:74:b5:8b:3a:02:fc:9c:43:29:60:d6:
76:cc:d4:f3:53:ac:15:81:05:2f:46:f5:10:e0:a5:
aa:a6:6f:84:28:ae:9e:bd:ee:39:d6:e3:7b:dd:57:
ed:cc:a3:d5:07:10:11:e0:70:68:b0:0b:39:0c:37:
93:3f:98:d7:a8:be:99:57:ff:c2:42:9e:2d:0c:48:
90:b9:c9:a0:fa:6d:ff:ce:3d:ee:c1:ad:f1:15:b6:
52:91:af:a7:da:39:d9:04:2e:b3:0a:cf:05:5b:ab:
da:1e:35:c2:f3:0e:57:99:56:a4:1a:15:97:fe:de:
f3:bc:58:de:ec:cc:34:9e:d5:77:f9:14:9b:24:39:
1a:c3:02:85:6d:bf:85:58:64:56:a2:91:b6:20:f2:
f7:c3:93:ce:ea:5d:ee:bf:31:56:b4:0d:98:ec:c5:
9c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:80:17:77:54:CC:80:E2:01:27:46:7B:59:F9:9B:8E:9B:50:84:13
X509v3 Authority Key Identifier:
keyid:B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.38.106.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:65:b8:71:c7:b4:5f:ed:de:0e:b4:36:1b:dc:0a:92:00:bb:
80:fd:41:36:bb:ce:ac:0a:dd:24:64:03:74:a4:5c:80:05:a3:
fb:1f:d9:4d:85:8d:92:3b:b9:90:8a:9f:07:de:92:73:e8:00:
3d:8a:66:7b:6d:6b:67:c7:8c:47:a9:9f:11:b1:ec:0c:78:f6:
d8:92:e6:b8:00:77:dd:87:0a:f6:07:0a:36:9b:12:bc:b7:41:
22:0b:7b:12:b7:dd:14:e4:5c:9f:70:45:5f:0e:76:3b:e4:65:
ab:c8:6c:72:dc:89:df:19:32:34:86:b9:e6:17:4f:db:44:53:
f5:f2:c9:51:26:23:db:23:07:5a:f2:17:d7:2b:0b:84:62:87:
fc:7c:40:c8:a2:8f:cb:2d:6a:14:15:e9:95:db:8a:a5:f4:20:
31:2f:8a:b1:96:d9:c1:e3:34:10:93:4c:fd:b0:14:f1:13:c9:
e3:c6:43:5c:88:b6:39:93:0d:59:7b:dc:34:61:e9:8b:a5:a3:
6a:4f:31:c1:33:1c:19:e1:4b:3a:40:e2:ec:2b:9a:00:86:3d:
27:46:2e:76:34:44:5f:fa:5d:e9:a6:96:5c:3a:26:31:00:f7:
89:b9:48:96:04:1d:28:09:89:b2:1a:e1:18:b1:d7:8a:87:f0:
48:e3:15:75
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUQTMSlPZm/KgueFnlXvsst1IANp8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0Qy
OUQxM0JERDAeFw0yNDA4MTMwMzQ5MzNaFw0yNTA4MTIwMzU0MzNaMDMxMTAvBgNV
BAMTKDkwODAxNzc3NTRDQzgwRTIwMTI3NDY3QjU5Rjk5QjhFOUI1MDg0MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwA43WtjMw+Apnbkvg7qa/r1eS
v7AF+9SL8eE6Yc1zdA+iUTGZWULkT8oxX4pFMEjxtMISPZgGrX6iWQQWyZScVvqJ
OpUFb0bdMOAd34ZsteGYNVovIgXO5V3VDQl0tYs6AvycQylg1nbM1PNTrBWBBS9G
9RDgpaqmb4Qorp697jnW43vdV+3Mo9UHEBHgcGiwCzkMN5M/mNeovplX/8JCni0M
SJC5yaD6bf/OPe7BrfEVtlKRr6faOdkELrMKzwVbq9oeNcLzDleZVqQaFZf+3vO8
WN7szDSe1Xf5FJskORrDAoVtv4VYZFaikbYg8vfDk87qXe6/MVa0DZjsxZytAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUkIAXd1TMgOIBJ0Z7WfmbjptQhBMwHwYDVR0j
BBgwFoAUtaaK3oEyLxlDIL5DAsaJfSnRO90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
YjAxNjA4NS0yZjk0LTQwZmYtODBjZS1jZTIzZDM5ZTY1YTEvMC9CNUE2OEFERTgx
MzIyRjE5NDMyMEJFNDMwMkM2ODk3RDI5RDEzQkRELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0QyOUQx
M0JERC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RiMDE2MDg1LTJmOTQtNDBmZi04
MGNlLWNlMjNkMzllNjVhMS8wLzMxMzAzMzJlMzMzODJlMzEzMDM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzAzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZyZqMA0GCSqG
SIb3DQEBCwUAA4IBAQALZbhxx7Rf7d4OtDYb3AqSALuA/UE2u86sCt0kZAN0pFyA
BaP7H9lNhY2SO7mQip8H3pJz6AA9imZ7bWtnx4xHqZ8RsewMePbYkua4AHfdhwr2
Bwo2mxK8t0EiC3sSt90U5FyfcEVfDnY75GWryGxy3InfGTI0hrnmF0/bRFP18slR
JiPbIwda8hfXKwuEYof8fEDIoo/LLWoUFemV24ql9CAxL4qxltnB4zQQk0z9sBTx
E8njxkNciLY5kw1Ze9w0YemLpaNqTzHBMxwZ4Us6QOLsK5oAhj0nRi52NERf+l3p
ppZcOiYxAPeJuUiWBB0oCYmyGuEYsdeKh/BI4xV1
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:55 2025 by rpki-client